5 ms·

> I trust Google login and oAuth to be protected with better security practices than the general login. It's not about security. It's about that the oAuth prot

by kodah 4y ago

> I trust Google login and oAuth to be protected with better security practices than the general login. It's not about security. It's about that the oAuth protocol relies on good faith providers. Google is demonstrably not a good faith provider in terms of tracking. Part of oAuth includes refreshing that token and validating it with the provider. > I am curious why you say blocked accounts happens regularly. As for the blocked accounts bit, it's not so much the frequency that matters. It's that Google has zero and I mean literally zero humans to contact if their security machine flags your account for something. Their appeals process is a joke and a bad one at that. If you're searching for frequency, use Algolia to get an idea of how many people have appealed to this site: https://hn.algolia.com/?q=Google+blocked+account https://hn.algolia.com/?q=Google+blocked+account Next, load up the Googler and search Twitter and Reddit for the same thing. There's a lot of occurrences, horror stories, and news articles about it. Google does not care about addressing this.

murderfs 4y ago
> If you're searching for frequency, use Algolia to get an idea of how many people have appealed to this site: https://hn.algolia.com/?q=Google+blocked+account https://hn.algolia.com/?q=Google+blocked+account 83 results, and the first page has like one actual appeal from a person?
sundarurfriend 4y ago
I did a few different versions of that search for the LessWrong discussion about this (https://www.lesswrong.com/posts/ESp3SsuqWrht7SApu/not-getting-hacked?commentId=XX2gGzwAoaTS2ErgM#comments https://www.lesswrong.com/posts/ESp3SsuqWrht7SApu/not-gettin...) and learned that a large majority of these blocked accounts are developer accounts. There are still cases where individuals' accounts get banned randomly (and if there's enough ruckus, reinstated), which I've posted about there. And thinking about it, it might be the case that developer accounts with $$$ invested in them might just be the most likely to post on HN and complain, while individuals just suffer Google's "support" and give up. In any case, they're not as easily visible as the dev account bans, so we don't know how often they occur (unless someone trawls through support.google.com posts and creates a list of such).
- 2devnull 4y ago
  The place you would find such stories are the google forums where google and their volunteers have a vested interest in pruning such complaints. Most normies don’t get locked out because they don’t use 2fa, don’t change devices and use a single easy to remember (probably easily guessable) password for every account. Getting locked out of google is most likely the result of using security best practices like installing a 2fa app on a device that gets lost. Or a misplaced yubi key, etc… Good advice is to print out one time use codes, and store them somewhere safe, like a safe. Physical security is much better in a digital world than digital security.

by kodah 4y ago

murderfs 4y ago

> If you're searching for frequency, use Algolia to get an idea of how many people have appealed to this site: https://hn.algolia.com/?q=Google+blocked+account https://hn.algolia.com/?q=Google+blocked+account 83 results, and the first page has like one actual appeal from a person?

sundarurfriend 4y ago

I did a few different versions of that search for the LessWrong discussion about this (https://www.lesswrong.com/posts/ESp3SsuqWrht7SApu/not-getting-hacked?commentId=XX2gGzwAoaTS2ErgM#comments https://www.lesswrong.com/posts/ESp3SsuqWrht7SApu/not-gettin...) and learned that a large majority of these blocked accounts are developer accounts. There are still cases where individuals' accounts get banned randomly (and if there's enough ruckus, reinstated), which I've posted about there. And thinking about it, it might be the case that developer accounts with $$$ invested in them might just be the most likely to post on HN and complain, while individuals just suffer Google's "support" and give up. In any case, they're not as easily visible as the dev account bans, so we don't know how often they occur (unless someone trawls through support.google.com posts and creates a list of such).

2devnull 4y ago
The place you would find such stories are the google forums where google and their volunteers have a vested interest in pruning such complaints. Most normies don’t get locked out because they don’t use 2fa, don’t change devices and use a single easy to remember (probably easily guessable) password for every account. Getting locked out of google is most likely the result of using security best practices like installing a 2fa app on a device that gets lost. Or a misplaced yubi key, etc… Good advice is to print out one time use codes, and store them somewhere safe, like a safe. Physical security is much better in a digital world than digital security.